Ask HN: Allow agents access to cloud files with least privilege?

3 points by beerglass 4 hours ago | 2 comments

Let's say I have a Google spreadsheet on my Drive that I want an agent like Muse to work on. Currently my options are: a) I can allow Muse to access my Drive b) Share the spreadsheet with edit privilege to anyone with link and give that link to Muse. Both of these are not least privilege access that I'm comfortable with. Ideally I should be able to share access to a file with an agent. Other options like webhooks, burner accounts, etc are too tedious to do regularly. Any obvious solution that I am missing?

sleda 4 hours ago |

A grant limited to one selected file, with read and write access scoped separately and an expiry, would avoid giving the agent the whole Drive.

beerglass 4 hours ago | |

Could not find an easy way to do this. Connect agent (Muse) to Drive is opening up the whole thing. Please share steps if you can.